This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sVVFLj5xnLVzR80s4jzFTizFpL4.roa File: sVVFLj5xnLVzR80s4jzFTizFpL4.roa (raw, json) Hash identifier: Tzh4qHBgRTJSkzf8NAvvbnL9PFvj6KUWG/qjRfj2aCI= Subject key identifier: B1:55:45:2E:3E:71:9C:B5:73:47:CD:2C:E2:3C:C5:4E:2C:C5:A4:BE Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF32F40CA7C05AE5ECA152B7D765B Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sVVFLj5xnLVzR80s4jzFTizFpL4.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60808 IP address blocks: 188.253.96.0/19 maxlen: 24 2a05:ec80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f3:2f:40:ca:7c:05:ae:5e:ca:15:2b:7d:76:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b155452e3e719cb57347cd2ce23cc54e2cc5a4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:a1:1c:9f:7e:da:e8:68:c5:e0:49:77:21: 8c:bb:f7:a1:f1:9f:98:aa:38:a4:ff:e1:13:3d:98: 38:e5:7b:34:4c:55:b5:ea:f1:85:0f:ef:e9:a1:59: c2:a0:3a:f9:fd:b5:6c:33:73:b3:5e:fd:b3:5a:20: 44:96:f9:7e:f4:e9:f7:23:fc:68:42:c7:d5:3b:24: 6f:e6:08:4f:15:61:37:62:e2:75:9c:65:77:07:71: 7b:3f:bc:1d:84:9d:c3:01:1b:ae:a1:5b:65:b4:03: b8:b6:ad:85:53:56:ee:a3:ae:eb:a3:8d:89:e7:d0: c5:cf:2e:19:e0:87:6a:8a:0b:a5:6a:da:02:43:d9: 58:fa:02:58:a7:c5:62:02:0c:6b:fd:01:8d:38:e4: 5e:82:e4:d1:5c:ca:a5:8d:cd:09:d9:f1:80:bf:a9: 55:38:3a:fa:a1:33:4c:62:64:4d:8f:83:bb:2d:10: dc:5f:a7:1b:5f:52:57:dc:a4:42:4c:c4:30:3e:21: 65:95:55:88:31:8b:c5:67:9b:3e:42:48:d1:ce:cb: 9d:2b:c8:f8:d4:68:cf:63:bb:55:35:08:02:36:f9: b7:63:09:83:e9:44:21:e6:ed:e1:08:45:b5:c4:b5: c8:20:7b:3a:fe:26:07:c9:b6:3d:26:74:6d:79:c7: d4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:55:45:2E:3E:71:9C:B5:73:47:CD:2C:E2:3C:C5:4E:2C:C5:A4:BE X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sVVFLj5xnLVzR80s4jzFTizFpL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.253.96.0/19 IPv6: 2a05:ec80::/29 Signature Algorithm: sha256WithRSAEncryption 92:41:20:72:6f:e5:8e:37:e6:c9:40:30:28:af:1d:90:8d:c6: 0d:f8:c7:7f:60:74:6b:d8:f1:95:0f:16:3d:04:06:39:48:ee: 6c:62:39:e6:7c:40:ab:59:e5:6c:99:22:9e:d2:32:74:2a:2f: e1:70:3b:53:a9:fd:22:8e:94:03:9d:65:69:55:a1:04:66:19: 62:cf:32:f9:dd:58:5d:c7:ba:6e:9a:08:23:79:cc:f0:fb:b9: d6:a5:9a:68:4c:4c:09:a9:67:bc:30:62:93:6a:f1:3c:90:61: d2:80:0f:c0:0a:1c:8b:00:e4:9e:40:2e:dc:6a:32:d7:70:62: a9:62:5c:56:34:2d:3d:2f:02:8f:6f:80:2c:ec:0e:9b:88:88: 92:e8:e7:e0:8b:68:11:0a:20:8a:cb:cc:9d:e4:8f:f6:30:97: a7:7a:a1:15:36:70:35:a2:50:c3:20:28:88:83:3d:30:ce:ce: 8f:64:2e:e0:9b:7a:b1:b4:c5:b8:57:64:b2:39:44:ef:f7:a7: 3a:3b:fc:51:c9:86:3b:c4:11:ad:ff:6b:b6:30:e8:cc:5e:3a: 5d:0e:76:2c:bd:23:6c:79:90:e8:62:a1:9a:40:82:a9:aa:db: 90:30:4e:76:c6:12:e9:3a:c4:03:2b:4b:4b:32:71:4e:0c:73: 69:fa:b3:26 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26vMvQMp8Ba5eyhUrfXZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTU1NDUyZTNlNzE5Y2I1NzM0N2NkMmNlMjNjYzU0ZTJjYzVhNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yahHJ9+2uhoxeBJdyGMu/eh8Z+Y qjik/+ETPZg45Xs0TFW16vGFD+/poVnCoDr5/bVsM3OzXv2zWiBElvl+9On3I/xo QsfVOyRv5ghPFWE3YuJ1nGV3B3F7P7wdhJ3DARuuoVtltAO4tq2FU1buo67ro42J 59DFzy4Z4IdqigulatoCQ9lY+gJYp8ViAgxr/QGNOOReguTRXMqljc0J2fGAv6lV ODr6oTNMYmRNj4O7LRDcX6cbX1JX3KRCTMQwPiFllVWIMYvFZ5s+QkjRzsudK8j4 1GjPY7tVNQgCNvm3YwmD6UQh5u3hCEW1xLXIIHs6/iYHybY9JnRtecfUNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLFVRS4+cZy1c0fNLOI8xU4sxaS+MB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvc1ZWRkxqNXhuTFZ6UjgwczRqekZUaXpGcEw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFvP1gMA0E AgACMAcDBQMqBeyAMA0GCSqGSIb3DQEBCwUAA4IBAQCSQSByb+WON+bJQDAorx2Q jcYN+Md/YHRr2PGVDxY9BAY5SO5sYjnmfECrWeVsmSKe0jJ0Ki/hcDtTqf0ijpQD nWVpVaEEZhlizzL53Vhdx7pumggjeczw+7nWpZpoTEwJqWe8MGKTavE8kGHSgA/A ChyLAOSeQC7cajLXcGKpYlxWNC09LwKPb4As7A6biIiS6Ofgi2gRCiCKy8yd5I/2 MJeneqEVNnA1olDDICiIgz0wzs6PZC7gm3qxtMW4V2SyOUTv96c6O/xRyYY7xBGt /2u2MOjMXjpdDnYsvSNseZDoYqGaQIKpqtuQME52xhLpOsQDK0tLMnFODHNp+rMm -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:29 2026 by rpki-client